IT support for businesses across Shropshire, Wales & the Midlands
☰ Menu
Managed IT
Cyber Security
Cloud & Microsoft 365
Who We Help
IT Support Pricing
Get Support
Call 01743 343411
Microsoft 365 security review
Microsoft 365 holds your email, files and Teams chats, which makes it the first place attackers look. Our Microsoft 365 security review checks your tenant against Microsoft’s own best practice and tells you exactly what to fix, in plain English.
What we check
We look at the settings that most often lead to account takeovers, data leaks and invoice fraud.
MFA coverage, legacy sign-in methods, Conditional Access and risky sign-in activity.
Who has admin rights, whether admin accounts are separate and properly protected, and old accounts that should be removed.
Anti-phishing and spam settings, SPF, DKIM and DMARC, and suspicious forwarding rules that attackers use to hide.
External sharing in SharePoint, OneDrive and Teams, anonymous links and files shared more widely than intended.
Unused or mismatched licences, security features you’re paying for but not using, and whether your data is backed up.
How it works
A quick, low-disruption review with clear results, whether or not we already look after your IT.
You grant us temporary, read-only access to review your Microsoft 365 settings. Nothing is changed without your agreement.
We run checks against Microsoft’s recommended security baseline and Secure Score.
Our engineers look beyond the score at the things tools miss, such as forwarding rules, overshared files and dormant accounts.
A plain-English report with each finding rated by risk and a clear recommendation for fixing it.
We talk you through the results and highlight anything urgent that should be fixed straight away.
If you’d like, our engineers make the changes for you, then confirm everything is working as it should.
Why it matters
Most Microsoft 365 breaches we see don’t involve clever hacking, just default settings nobody changed. The review finds them before an attacker does.
Gaps in MFA and legacy sign-ins are the most common way into business mailboxes.
Hidden forwarding rules and weak email authentication let criminals impersonate you and your suppliers.
Fixing oversharing before rolling out Copilot stops AI surfacing files people shouldn’t see.
MFA on cloud services and controlled admin access are now must-haves for Cyber Essentials.
Planning a Copilot rollout? This review is the first step of our Microsoft Copilot service. Find out more about our Microsoft 365 support.
FAQs
Do you need full admin access?
No. We use temporary, read-only access for the review, and you can remove it as soon as we’re finished.
How long does the review take?
For most small and medium-sized businesses, we can complete the review and deliver the report within a few working days.
Will it affect our users?
No. The review only reads settings. Any changes we recommend are agreed with you first and scheduled to avoid disruption.
Can our current IT provider fix the issues?
Yes. The report is yours, and any competent IT provider can act on it. We’re also happy to make the changes for you.
What is Microsoft Secure Score?
Secure Score is Microsoft’s measurement of how many recommended security settings you have in place. It’s a useful guide, but it doesn’t catch everything, which is why we also review your tenant by hand.
Find out how secure your Microsoft 365 really is, with clear, prioritised fixes from our Shrewsbury team.